awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
cloudflare avatar

cloudflare/boringtun

0
View on GitHub↗
7,089 stars·513 forks·Rust·BSD-3-Clause·24 views

Boringtun

Boringtun is a Rust-based library and userspace implementation of the WireGuard protocol. It provides the necessary logic to establish encrypted network tunnels and route secure traffic across different operating systems without requiring kernel-level administrative privileges.

The project is designed for embedding VPN logic into other applications. It achieves this through a C-compatible binary interface and cross-platform native bindings, allowing other programming languages to incorporate tunnel operations and peer management into their own software.

Features

  • Userspace Implementations - Implements the WireGuard protocol in userspace, eliminating the need for kernel-level administrative privileges.
  • Peer-to-Peer Tunneling - Implements the specific cryptographic handshakes and encapsulation required for WireGuard peer-to-peer tunneling.
  • Secure Tunnels - Creates userspace encrypted tunnels to securely route network traffic across different operating systems.
  • VPN Component Libraries - Designed to be embedded into other applications to provide secure network connection management.
  • VPN Library Bindings - Provides binary interfaces and native bindings for incorporating tunnel operations into other software.
  • VPN Tunnels - Establishes encrypted network tunnels without requiring a kernel-level installation.
  • WireGuard VPN Support - Implements a complete userspace version of the WireGuard protocol for secure tunneling.
  • Native Bindings - Provides cross-platform native bindings that bridge high-level languages with the underlying native tunnel implementation.
  • VPN Libraries - Acts as a Rust-based library for embedding secure tunnel logic into other languages and applications.
  • FFI Interfaces - Exposes a C-compatible binary interface allowing non-Rust languages to integrate the tunnel logic.
  • Cross-Platform Networking - Ensures consistent secure networking and WireGuard implementation across multiple operating systems.
  • Packet Buffering - Implements raw data buffer processing to handle network traffic between applications and the encrypted tunnel.
  • VPN Development Frameworks - Provides a Rust-based library for building tailored network applications with encrypted tunneling.
  • VPN Protocol Wrappers - Offers protocol wrappers and binary interfaces to integrate secure tunneling directly into other applications.
  • Memory Safety - Leverages Rust's memory safety to prevent buffer overflows and leaks during low-level packet processing.
  • Network Security - Userspace implementation of the WireGuard VPN protocol.

Star history

Star history chart for cloudflare/boringtunStar history chart for cloudflare/boringtun

How this analysis was created: This summary and feature list are AI-generated from collected project material and can contain mistakes. Stars, license and language are imported from GitHub. Inclusion does not mean that we have tested or audited this project. Check the source documentation for any feature you depend on. Learn more on our About page.

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Start searching with AI

Projects sharing features with Boringtun

These projects share indexed features with Boringtun. Shared tags can include platform or build tooling; verify the primary use case before treating a result as a replacement.
  • wireguard/wireguard-goWireGuard avatar

    WireGuard/wireguard-go

    4,058View on GitHub↗

    wireguard-go is a Go implementation of the WireGuard protocol that operates as a userspace tunneling engine. It functions as a cross-platform network interface designed to establish encrypted tunnels between peers without requiring modifications to the system kernel. By implementing the protocol in userspace, this project provides a consistent network stack that enables secure peer-to-peer communication across different operating systems. It allows for the creation and management of encrypted network interfaces and tunnels to route private traffic over public networks.

    Go
    View on GitHub↗4,058
  • tonarino/innernettonarino avatar

    tonarino/innernet

    5,495View on GitHub↗

    Innernet is a WireGuard VPN mesh orchestrator and control plane that automates the deployment of encrypted tunnels between distributed peers. It functions as a virtual private network that coordinates endpoint discovery and distributes network configurations from a centralized server to establish a private overlay network. The system differentiates itself through a structured peer management lifecycle, using single-use invitation files for secure onboarding and cryptographic key exchange. It provides granular network segmentation by organizing peers into named CIDR blocks, allowing administra

    Rust
    View on GitHub↗5,495
  • windtf/wireproxywindtf avatar

    windtf/wireproxy

    5,656View on GitHub↗

    wireproxy is a user-space WireGuard client and network gateway that establishes secure tunnels without requiring root privileges or system-wide interface changes. It functions as a VPN proxy that can expose WireGuard connections as SOCKS5 or HTTP proxies. The project provides specialized routing capabilities, including a TLS SNI proxy that directs encrypted traffic based on Server Name Indication and a gateway for mapping local TCP and UDP ports to remote destinations. It supports multi-peer management to route traffic between several endpoints using defined IP ranges. Additional capabilitie

    Gogolangnetworkproxy
    View on GitHub↗5,656
  • dotheevo/selfhosted-apps-dockerDoTheEvo avatar

    DoTheEvo/selfhosted-apps-docker

    2,833View on GitHub↗

    This project is a curated collection of deployment files and configurations for hosting a wide variety of open-source services on a home server. It primarily utilizes Docker and Docker Compose to automate the orchestration, lifecycle management, and deployment of containerized applications. The repository provides a comprehensive suite for self-hosted infrastructure, covering network management tools, media streaming, and home automation. It includes specialized configurations for securing internal services via reverse proxies, WireGuard VPN tunnels, and automated SSL/TLS certificate manageme

    Shell
    View on GitHub↗2,833
Compare all 30 related projects→

Frequently asked questions

What does cloudflare/boringtun do?

Boringtun is a Rust-based library and userspace implementation of the WireGuard protocol. It provides the necessary logic to establish encrypted network tunnels and route secure traffic across different operating systems without requiring kernel-level administrative privileges.

What are the main features of cloudflare/boringtun?

The main features of cloudflare/boringtun are: Userspace Implementations, Peer-to-Peer Tunneling, Secure Tunnels, VPN Component Libraries, VPN Library Bindings, VPN Tunnels, WireGuard VPN Support, Native Bindings.

Which projects share features with cloudflare/boringtun?

Projects with overlapping indexed features include: wireguard/wireguard-go — wireguard-go is a Go implementation of the WireGuard protocol that operates as a userspace tunneling engine. It… tonarino/innernet — Innernet is a WireGuard VPN mesh orchestrator and control plane that automates the deployment of encrypted tunnels… windtf/wireproxy — wireproxy is a user-space WireGuard client and network gateway that establishes secure tunnels without requiring root… dotheevo/selfhosted-apps-docker — This project is a curated collection of deployment files and configurations for hosting a wide variety of open-source… firezone/firezone — Firezone is a zero trust network access platform that uses WireGuard to provide identity-based connectivity to… raspap/raspap-webgui — This project is a wireless hotspot management interface for Debian devices. It provides a web-based controller for…